Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          3BDqKytfSOYTb0wbhEirP47co+nRhh6HyIZ8A9rzwIQ=
Subject key identifier:   DA:6F:6D:83:72:5B:63:00:4D:61:B9:65:AB:FE:4D:4E:BE:CF:FB:93
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       01A0E1AB3D8DD2B070514DD90E5FDE0FB32C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          1763
Signing time:             Sun 27 Sep 2026 07:01:30 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:30 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:30 +0000
Files and hashes:         1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
                          2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
                          3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
                          4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
                          5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: dLjU6RHc9yZqJmx/er9N0Og6jc5JJoC0Hlph5PwRNbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:ab:3d:8d:d2:b0:70:51:4d:d9:0e:5f:de:0f:b3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Sep 27 07:01:30 2026 GMT
            Not After : Sep 28 07:01:30 2026 GMT
        Subject: CN=da6f6d83725b63004d61b965abfe4d4ebecffb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:a1:5c:b5:69:71:43:33:75:bd:c6:c4:7f:
                    59:d3:be:b0:f9:50:fc:2a:a5:93:da:7a:71:9d:e6:
                    0e:39:f8:22:bc:8e:0e:4f:3c:9d:68:a5:ad:25:8b:
                    41:35:de:60:74:47:55:df:9f:0a:0c:f0:b8:9f:33:
                    7c:9a:15:da:99:65:d0:f6:7c:75:d1:0f:de:89:f0:
                    42:b6:3f:88:2a:db:3c:6a:f1:7f:d4:2b:09:5b:39:
                    8d:24:c9:96:58:43:3d:f7:d2:76:f8:29:f1:65:d7:
                    b9:c2:00:81:f0:21:70:15:fe:9f:56:1c:44:e6:91:
                    51:7c:f1:c8:c2:39:0b:1a:59:e8:56:61:00:3a:86:
                    dc:a4:01:9a:97:44:88:67:e1:02:3a:3d:d7:33:81:
                    bd:44:a0:71:3b:0a:d7:bd:8e:d0:2a:49:b3:96:9e:
                    7b:e0:1a:8f:07:42:4a:bf:da:d8:d8:f3:a6:a9:db:
                    b3:ee:fc:76:77:11:9f:56:12:a1:06:ac:3d:29:28:
                    e5:80:23:c8:15:22:8f:bd:44:fc:25:12:ec:d0:53:
                    d7:8c:c8:78:bd:5a:00:5c:ac:4f:66:ad:80:0e:75:
                    b0:40:1a:21:5f:c6:90:52:07:65:10:a9:f1:a5:6b:
                    65:6c:ba:28:31:f7:8e:f4:8e:95:97:66:6a:b4:32:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:6D:83:72:5B:63:00:4D:61:B9:65:AB:FE:4D:4E:BE:CF:FB:93
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:8d:d8:54:a8:e0:27:0d:2d:23:7f:bb:ee:b7:3f:62:68:
         a7:3f:df:ba:a9:5c:9b:c4:ea:ad:2b:08:b5:7f:93:3a:2d:fb:
         45:a4:8f:51:a6:fe:e0:23:8c:bb:66:06:86:62:fa:00:2d:f9:
         8a:1c:e9:86:66:69:f6:b4:51:83:a1:4c:b4:c1:fa:5b:4a:01:
         55:83:37:4c:90:1c:7f:a9:26:0b:82:9f:83:2b:28:c3:6d:32:
         d7:4e:bf:fe:27:0d:c0:58:f6:34:9d:e6:3d:ca:22:fb:7b:12:
         75:02:dc:f5:24:7b:cf:c0:ca:10:00:0b:cf:04:f3:23:04:9b:
         30:a9:4a:8c:8d:fe:03:9b:c2:76:05:9d:44:b5:a5:08:76:92:
         f1:06:40:5c:24:3a:dd:b9:28:07:93:b3:03:49:82:74:e9:35:
         0e:d7:41:9b:c0:e5:37:53:3e:5b:42:22:48:16:07:22:2c:32:
         a7:c0:e9:ff:f2:dd:79:c7:36:61:4a:4e:7c:2e:f8:bd:23:52:
         fe:9f:10:01:f9:d4:65:a0:40:27:7d:54:49:6e:d5:75:f6:8e:
         78:f3:49:f4:e0:24:1e:fa:b8:22:ca:56:34:78:75:df:b7:60:
         02:00:69:92:00:8c:25:f8:a7:42:ac:78:68:f8:35:99:20:de:
         7b:de:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:05:30 2026 by rpki-client